Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Sep 2001 18:50:44 +0100
From:      "Nuno Teixeira" <nuno.mailinglists@pt-quorum.com>
To:        "Nuno Teixeira" <nuno.mailinglists@pt-quorum.com>
Cc:        <freebsd-security@freebsd.org>
Subject:   Re: port 1023: listen
Message-ID:  <011001c14133$9e021a40$0a00a8c0@qnuno>
References:  <00cf01c1412b$7ecc4540$0a00a8c0@qnuno>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_010D_01C1413B.FCF84710
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello to all,

Ok. thanks for your help.

I have found what process is runing on that port.

Thanks very much,

Nuno


  ----- Original Message -----=20
  From: Nuno Teixeira=20
  To: freebsd-security@freebsd.org=20
  Sent: Wednesday, September 19, 2001 5:52 PM
  Subject: port 1023: listen


  Hello to all,

  Today I've run nmap to scan my server ports and I found a port that I =
don't know (Well Known Ports: 0 to 1023)

  [nmap]
  1023/tcp   open        unknown

  I login at the server I there it is again and  netstat shows:

  [netstat -n]
  tcp4       0      0  *.1023                 *.*                    =
LISTEN


  Could my server be in security problems?
  What service or program open this port and how do I turn it off?



  Thanks very much,

  Nuno Teixeira

------=_NextPart_000_010D_01C1413B.FCF84710
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4522.1800" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hello to all,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Ok. thanks for your help.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I have found what process is runing on =
that=20
port.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks very much,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Nuno</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A title=3Dnuno.mailinglists@pt-quorum.com=20
  href=3D"mailto:nuno.mailinglists@pt-quorum.com">Nuno Teixeira</A> =
</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dfreebsd-security@freebsd.org=20
  =
href=3D"mailto:freebsd-security@freebsd.org">freebsd-security@freebsd.org=
</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Wednesday, September 19, =
2001 5:52=20
  PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> port 1023: =
listen</DIV>
  <DIV><BR></DIV>
  <DIV><FONT face=3DArial size=3D2>Hello to all,</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Today I've run nmap to scan my server =
ports and I=20
  found a port that I don't know (Well Known Ports: 0 to =
1023)</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>[nmap]</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2>1023/tcp&nbsp;&nbsp;=20
  open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; unknown</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>I login at the server I there it is =
again=20
  and&nbsp;&nbsp;netstat shows:</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>[netstat -n]</FONT></DIV>
  <DIV><FONT face=3DArial =
size=3D2>tcp4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;=20
  =
*.1023&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  =
*.*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  LISTEN</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Could my server be in security=20
  problems?</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2>What service or program open this =
port=20
  and&nbsp;how do I turn it off?</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Thanks very much,</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Nuno=20
Teixeira</FONT></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_010D_01C1413B.FCF84710--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?011001c14133$9e021a40$0a00a8c0>